Drupal

Why Drupal Serving HTTP Even After Enabling HTTPS on the Server

Introduction When you switch your Drupal site to HTTPS whether via Apache, NGINX you expect Drupal to recognise it's running securely. But then you notice something off: Internal links are still rendered as http://. $request->isSecure() returns false. Redirects start looping or downgrading to HTTP. You see Mixed Content...

by Amrit Pal Singh
Tag: https
28-May-2025

Application Security, Grails

Spring Security & Grails: Cross domain authentication from HTTP to HTTPS

We were trying to implement SSL-based login and registration (i.e. HTTPS) in an e-commerce web application which was otherwise using the non-secure protocol (i.e. HTTP) for the entire website. Instead of moving the entire web application to SSL, which would have increased response times, we thought it would be best if only the...

by Roni C Thomas
Tag: https
01-Oct-2013